TI-2024-21366 CVE-2024-32472 · GHSA-m64q-4jqh-f72f
excalidraw vulnerable to a Stored XSS in excalidraw's web embed component
Priority MEDIUM 60
excalidraw is an open source virtual hand-drawn style whiteboard.
excalidraw
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
excalidraw records in CISA KEVNo excalidraw vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2023-11364 CVE-2023-26140 · GHSA-v7v8-gjv7-ffmr
Cross-site scripting in @excalidraw/excalidraw
Priority LOW 28
Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting (XSS) via embedded links in whiteboard objects due to improper input sanitization.